Evaluating Flow-Based NAT Detection Models Beyond Controlled Environments

Dataset asociated wtih the reserach paper “Evaluating Flow-Based NAT Detection Models Beyond Controlled Environments“, presented at the 2026 International Conference on Smart and Sustainable Technologies (SpliTech 2026)

This dataset contains network flow records collected from traffic observed on the CESNET3 academic network. The data were captured in November 2025 and annotated to support research on Network Address Translation (NAT) detection from flow-level statistics.

Two datasets are included. The first dataset (D2) was annotated manually using prior knowledge of devices present in the monitored network. In total, 236,976 devices were identified, including 106,586 NAT devices and 159,169 regular servers or end devices.

The second dataset (Dp) was extracted from broader monitoring data captured by CESNET3 probes and annotated using the DAF framework, a tool designed for operating system and device-type identification that can also detect NAT devices using multiple information sources (e.g., DNS, TLS, QUIC, HTTP). This dataset contains 902 devices positively identified as NAT devices, providing additional samples for experiments involving heterogeneous network traffic.

The datasets are intended for research on flow-based NAT detection, feature engineering, and machine learning model evaluation across different network environments.

Data Anonymization Statement:

Both datasets were anonymized before publication. Source and destination IP addresses were replaced with consistent placeholder identifiers to preserve flow relationships while preventing re-identification. The datasets do not contain personally identifiable information (PII) or sensitive user data.

———————————————————————————————————————————————————————————

If you will be so kind, please cite our paper, instead of the repository itself:

F. Chodura, M. Hulák and T. Čejka, “Evaluating Flow-Based NAT Detection Models Beyond Controlled Environments.” 2026 11th International Conference on Smart and Sustainable Technologies (SpliTech), Split and Bol, Croatia, 2026, doi: 10.23919/SpliTech70133.2026.11685456.

,
 booktitle=2026 11th International Conference on Smart and Sustainable Technologies (SpliTech), 
 title=Evaluating Flow-Based NAT Detection Models Beyond Controlled Environments, 
 year=2026,
 doi=10.23919/SpliTech70133.2026.11685456}

<p